It was discovered that ppp incorrectly handled certain options files. A local attacker could possibly use this issue to escalate privileges.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "ppp", "binary_version": "2.4.5-5.1ubuntu2.1" }, { "binary_name": "ppp-dev", "binary_version": "2.4.5-5.1ubuntu2.1" } ] }
{ "cves": [ { "id": "CVE-2014-3158", "severity": [ { "score": "medium", "type": "Ubuntu" } ] } ], "ecosystem": "Ubuntu:14.04:LTS" }
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2429-1.json"